SG0-001 · Question #343
In a switched fabric environment there is a need for security control of the FC switching infrastructure. Which of the following should be implemented to give the STRONGEST level of protection?
The correct answer is C. Hard zoning. To achieve the strongest security control within a Fibre Channel switched fabric, the most robust form of zoning should be implemented.
Question
In a switched fabric environment there is a need for security control of the FC switching infrastructure. Which of the following should be implemented to give the STRONGEST level of protection?
Options
- ALUN masking
- BSoft zoning
- CHard zoning
- DPort mapping
How the community answered
(53 responses)- A2% (1)
- B4% (2)
- C92% (49)
- D2% (1)
Why each option
To achieve the strongest security control within a Fibre Channel switched fabric, the most robust form of zoning should be implemented.
LUN masking is a storage array feature that controls access to LUNs at the storage level, not a security control for the Fibre Channel switching infrastructure itself.
Soft zoning relies on the Fibre Channel Name Server for enforcement and is less secure than hard zoning because devices could potentially ignore zone information or spoof WWNs to gain unauthorized access.
Hard zoning provides the strongest level of security in a Fibre Channel fabric by enforcing access control at the physical switch port level. This ensures that devices connected to specific ports can only communicate with other devices in the same zone, effectively preventing unauthorized communication even if a World Wide Name (WWN) is spoofed.
Port mapping is not a recognized or standard Fibre Channel security mechanism that provides a strong level of protection for the switching infrastructure.
Concept tested: Fibre Channel hard zoning security
Source: https://www.cisco.com/c/en/us/support/docs/storage-networking/mds-9000-series-multilayer-san-switches/44585-soft-hard-zone.html
Topics
Community Discussion
No community discussion yet for this question.